Install and Review Authority
By the end of this chapter, you will have installed an exact release inactive, reviewed its requested authority and explicitly enabled its commands once. Continue with the catalog and canary inspected in the previous chapter.
Invoke package-install. Filter the offered rows to rur.rot13@1.0.0, check its
source, and press Enter. The package service acquires the archive through HTTPS,
checks it against the signed projection and verifies its complete declared
contents. Failed integrity or compatibility checks preserve confirmed state.
Neither downloading nor installing evaluates the package's Ruby entrypoint.
When the authority review appears, installation has already retained the exact
release as disabled. Inspect the proposed composition, requested Ruby extension
authority and exact hashes. Catalog trust and a curator's decision do not grant
that authority. Close Help with Ctrl-G, type no, then press Enter.
Run package-list, choose that release and inspect it. It remains installed and
inactive; rot13-region has no callable contribution. Close Help and run
package-enable. Choose the same release, inspect the complete review, close
Help with Ctrl-G, then type yes and Enter once. The native owner prepares and
publishes the complete command generation. Declining or cancelling the review
leaves the previous active composition intact.
Only one version of a package can be active in the effective scope. Use
package-describe to inspect the current and requested authority and source
provenance. If preparation fails, use package-doctor; do not treat a downloaded
archive or a displayed review as successful activation.
For an uncurated source, first use package-manual-acquire with
directory|/absolute/source, artifact|/absolute/release.tar.zst, or
git|/absolute/repository|revision:FULL_COMMIT. Inspect the retained candidate,
then follow the same install/review flow. A branch or tag is resolved to one
exact commit. Editing the source does not change a running generation; acquire
and review a replacement explicitly. Manual origin supplies no curator endorsement.
The installation reference explains inactive records and retained content. The execution contract explains the separate restricted worker and checked editor effects.
Previous: Find Packages | Part | User Guide | Next: Use a Package Command